Skip to content
OpenAdvisories
Medium WID-SEC-2026-1075 12 CVEs

ImageMagick: Mehrere Schwachstellen

Published Apr 13, 2026 · Updated Nov 11, 2026 · Revision 19 · de

Vendor: amazon Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: SUSE Vendor: Ubuntu Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: openSUSE Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um einen Denial of Service Angriff durchzuführen oder andere, nicht näher spezifizierte Auswirkungen zu erreichen.

Product

ImageMagick ist eine Sammlung von Programmbibliotheken und Werkzeugen, die Grafiken in zahlreichen Formaten verarbeiten kann.

Vulnerabilities 12

  • High 7.5
    CVE-2026-33901

    ImageMagick has a Heap Buffer Overflow via MVG decoder

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafte…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • High 7.5
    CVE-2026-33908

    ImageMagick is vulnerable to Stack Overflow in DestroyXMLTree()

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, Magick frees the memory of the XML tree via the `DestroyXMLTree()` function; however, this process is executed recurs…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • Medium 6.2
    CVE-2026-40169

    ImageMagick: Heap buffer overflow (WRITE) in the YAML and JSON encoders

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, a crafted image could result in an out of bounds heap write when writing a yaml or json output, resulting in a crash. This issue has bee…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • Medium 6.2
    CVE-2026-40312

    ImageMagick: Off-by-One in MSL decoder could result in crash

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, an off by one error in the MSL decoder could result in a crash when a malicous MSL file is read. This issue has been fixed in version 7.…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • Medium 5.9
    CVE-2026-33900

    ImageMagick has a Heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the viff encoder contains an integer truncation/wraparound issue on 32-bit builds that could trigger an out of bounds…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • Medium 5.5
    CVE-2026-33902

    ImageMagick: Stack Overflow via Recursive FX Expression Parsing

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, a stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by provi…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • Medium 5.5
    CVE-2026-33905

    ImageMagick has an Out-of-Bounds read via -sample operation

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the -sample operation has an out of bounds read when an specific offset is set through the `sample:offset` define tha…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • Medium 5.5
    CVE-2026-40183

    ImageMagick: Heap buffer overflow when encoding JXL image with a 16-bit float

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, the JXL encoder has an heap write overflow when a user specifies that the image should be encoded as 16 bit floats. This issue has been …

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • Medium 5.5
    CVE-2026-40310

    ImageMagick: Heap out-of-bounds write in JP2 encoder

    ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below both 7.1.2-19 and 6.9.13-44, contain a heap out-of-bounds write in the JP2 encoder with when a user specifies an invalid sampling index. This issue h…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • Medium 5.5
    CVE-2026-40311

    ImageMagick: Heap-use-after-free via XMP profile could result in a crash when printing values

    ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-free vulnerability that can cause a crash when reading and printing values from an invalid XMP profil…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • Medium 5.3
    CVE-2026-33899

    ImageMagick: Heap BufferOverflow write of single zero byte when parsing XML

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-189 and 6.9.13-44, when `Magick` parses an XML file it is possible that a single zero byte is written out of the bounds. This issue has been…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • Medium 5.1
    CVE-2026-34238

    ImageMagick: Integer overflow in despeckle operation causes heap buffer overflow on 32-bit builds

    ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, an integer overflow in the despeckle operation causes a heap buffer overflow on 32-bit builds that will result in an …

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet

Revision history

  1. #19

    Neue Updates von Gentoo aufgenommen

  2. #18

    Neue Updates von Ubuntu aufgenommen

  3. #17

    Neue Updates von Ubuntu aufgenommen

  4. #16

    Neue Updates von SUSE aufgenommen

  5. #15

    Neue Updates von SUSE aufgenommen

  6. #14

    Neue Updates von SUSE aufgenommen

  7. #13

    Neue Updates von openSUSE aufgenommen

  8. #12

    Neue Updates von SUSE aufgenommen

  9. #11

    Neue Updates von Fedora aufgenommen

  10. #10

    Neue Updates von Fedora aufgenommen

  11. #9

    Neue Updates von Debian aufgenommen

  12. #8

    Neue Updates von Debian aufgenommen

  13. #7

    Neue Updates von Amazon aufgenommen

  14. #6

    Neue Updates von SUSE aufgenommen

  15. #5

    Neue Updates von SUSE aufgenommen

  16. #4

    Neue Updates von openSUSE aufgenommen

  17. #3

    Neue Updates von SUSE aufgenommen

  18. #2

    Neue Updates von openSUSE aufgenommen

  19. #1

    Initiale Fassung

References